Using the logs in DB, if a user (or pretended user) make more than 5 wrong attempt to gain (any) access a notification e-mail is sent to the Admin and to the user. The security notification, per user,is saved in DB for 1h, and checked against new notification, so that you can get a new one max every hour per user.
Setup an IP-Banning page. Showing a list of all IP ever hitting the system, their last access date, mac address, related user. And a big red button saying BAN.
Using the logs in DB, if a user (or pretended user) make more than 5 wrong attempt to gain (any) access a notification e-mail is sent to the Admin and to the user. The security notification, per user,is saved in DB for 1h, and checked against new notification, so that you can get a new one max every hour per user.
Setup an IP-Banning page. Showing a list of all IP ever hitting the system, their last access date, mac address, related user. And a big red button saying BAN.